Junior Sysadmin requests Windows NT Security Help?

[XIII]

Hi guys,

as a reshift of all our tasks within the company I work in, I will be responsible for the Windows NT LAN. It consists off Windows NT 4.0 Clients and Windows NT 4.0 Server (PDC and BDC).

The current setup is a joke at the moment so one of the first tasks I will start with is the security setup. At the moment there are no passwords required to logon to the Windows NT Server and Client. Only the Administrator password is required.

Can some exp. sysadmin tell me what the possibility's are for security? I would like to have:

- users login in with (unique) loginname and password.
- users have limited rights on the server (the eassiest part)
- some1 explain me please how to make custom user classes.
- every time some1 logs in that person will get the same settings/desktop etc. on every machine the login will happen (floatting logins??)
- every user will have a home directory which has a specific drive letter mapped (like every x:\ is some1's homedirectory)
- I want stop ppl. to stop setting there settings locally (like using 24bits bmp as there background). However let them do minor things like setting their own time settings.
- stop ppl. running specific items from the desktop.

I have a dozen other questions as well which I can't remember right now. I want thank every1 who wants to help me out in advance,

Cheers,

San aka XIII

 

[sixthsense]

1.make all the clients member of the domain
i guess they r already but just a reminder
2.make a restricted user account for each user on the server
making him the member of domainusers
make sure u change all the administrative passwords
of the local machines ie the clients
3.define the polocies u want to set and also give each user
a path for his home directory which u can define in the
user manager for domains

well u can be more specific towards a specific problem of urs one at a time plz
Kapil Technical Director
Infovalley Interwebspiders Pvt. Ltd.
Microsoft Certified System Engineer
visit

http://www.interwebspiders.com

If u find the information provided here useful to u then let me know by clicking on the link below s-)

 

[peterve]

and you will need to implement roaming profiles as well Peter Van Eeckhoutte
peter.ve@pandora.be